Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-4966
HistoryOct 10, 2023 - 2:15 p.m.

CVE-2023-4966

2023-10-1014:15:10
CWE-119
[email protected]
web.nvd.nist.gov
4
cve-2023-4966
netscaler adc
netscaler gateway
gateway
vpn
virtual server
ica proxy
cvpn
rdp proxy
aaa

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

9.5 High

AI Score

Confidence

High

0.969 High

EPSS

Percentile

99.7%

JSON

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA ?virtual?server.

Affected configurations

NVD
Node
citrixnetscaler_application_delivery_controllerRange12.1–12.1-55.300fips
OR
citrixnetscaler_application_delivery_controllerRange12.1–12.1-55.300ndcpp
OR
citrixnetscaler_application_delivery_controllerRange13.0–13.0-92.19-
OR
citrixnetscaler_application_delivery_controllerRange13.1–13.1-37.164fips
OR
citrixnetscaler_application_delivery_controllerRange13.1–13.1-49.15-
OR
citrixnetscaler_application_delivery_controllerRange14.1–14.1-8.50-
OR
citrixnetscaler_gatewayRange13.0–13.0-92.19
OR
citrixnetscaler_gatewayRange13.1–13.1-49.15
OR
citrixnetscaler_gatewayRange14.1–14.1-8.50

Related

thn 4
githubexploit 9
hackread 1
cve 1
malwarebytes 2
cvelist 1
hivepro 1
cisa_kev 1
rapid7blog 2
prion 1
talosblog 2
nuclei 1
metasploit 1
attackerkb 1
citrix 1
nessus 1
ics 1
avleonov 1
thn
thn
Critical Citrix NetScaler Flaw Exploited to Target from Government, Tech Firms
2023-10-18 12:27:00
LockBit Ransomware Exploiting Critical Citrix Bleed Vulnerability to Break In
2023-11-22 04:49:00
Alert: PoC Exploits Released for Citrix and VMware Vulnerabilities
2023-10-25 04:47:00
githubexploit
githubexploit
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler Application Delivery Controller
2023-10-27 11:00:09
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler Application Delivery Controller
2023-12-08 10:28:15
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler Application Delivery Controller
2023-10-25 07:17:54
hackread
hackread
Mandiant Tracks Four Uncategorized Groups Exploiting Citrix Vulnerability
2023-11-01 22:14:45
cve
cve
CVE-2023-4966
2023-10-10 14:15:10
malwarebytes
malwarebytes
Citrix Bleed widely exploited, warn government agencies
2023-11-24 19:20:11
Ransomware review: December 2023
2023-12-13 19:22:12
cvelist
cvelist
CVE-2023-4966 Unauthenticated sensitive information disclosure
2023-10-10 13:12:17
hivepro
hivepro
A Longstanding Zero-Day in Citrix Devices Exploited Since August
2023-10-20 12:47:00
cisa_kev
cisa_kev
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
2023-10-18 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-11-03 19:10:16
CVE-2023-4966: Exploitation of Citrix NetScaler Information Disclosure Vulnerability
2023-10-25 18:18:15
prion
prion
Information disclosure
2023-10-10 14:15:00
talosblog
talosblog
You’d be surprised to know what devices are still using Windows CE
2023-11-02 18:00:23
IR Q4 2023 trends: Significant increase in ransomware activity found in engagements, while education remains one of the most-targeted sectors
2024-01-24 13:00:04
nuclei
nuclei
Citrix Bleed - Leaking Session Tokens
2023-10-24 10:58:04
metasploit
metasploit
Citrix ADC (NetScaler) Bleed Scanner
2023-10-26 13:15:03
attackerkb
attackerkb
CVE-2023-4966
2023-10-10 00:00:00
citrix
citrix
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2023-4966 and CVE-2023-4967
2023-10-10 12:07:11
nessus
nessus
NetScaler ADC and NetScaler Gateway Multiple Vulnerabilities (CTX579459)
2023-10-13 00:00:00
ics
ics
#StopRansomware: LockBit 3.0 Ransomware Affiliates Exploit CVE 2023-4966 Citrix Bleed Vulnerability
2023-11-21 12:00:00
avleonov
avleonov
October 2023: back to Positive Technologies, Vulristics updates, Linux Patch Wednesday, Microsoft Patch Tuesday, PhysTech VM lecture
2023-11-05 18:39:59

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

9.5 High

AI Score

Confidence

High

0.969 High

EPSS

Percentile

99.7%

JSON
Related for NVD:CVE-2023-4966
thn4githubexploit9hackread1cve1malwarebytes2cvelist1hivepro1cisa_kev1rapid7blog2prion1talosblog2nuclei1metasploit1attackerkb1citrix1nessus1ics1avleonov1